[tor-bugs] #28675 [Core Tor/Tor]: Deprecate standard cookie authentication

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Dec 3 10:24:59 UTC 2018


#28675: Deprecate standard cookie authentication
----------------------------+----------------------------------
 Reporter:  wagon           |          Owner:  (none)
     Type:  enhancement     |         Status:  new
 Priority:  Medium          |      Milestone:  Tor: unspecified
Component:  Core Tor/Tor    |        Version:
 Severity:  Normal          |     Resolution:
 Keywords:  technical-debt  |  Actual Points:
Parent ID:                  |         Points:
 Reviewer:                  |        Sponsor:
----------------------------+----------------------------------

Comment (by teor):

 Replying to [comment:10 arma]:
 > Replying to [comment:8 teor]:
 > > But we need to allow other apps time to transition.
 >
 > I wonder if there are any apps that still use the old approach.

 A lot of blog posts suggest turning authentication off, rather than using
 cookie authentication.

 Here are some recent exceptions:
 https://stem.torproject.org/_modules/stem/connection.html
 https://airvpn.org/tor/

 But even they provide multiple authentication methods.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28675#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list